Shop / Privacy policy
Privacy policy
What we collect, why, and what you can do about it — in plain terms rather than in the words of the regulation.
In two sentences
We collect what is needed to prepare a bouquet, deliver it to the right person at the right moment, and keep you informed. We do not sell or rent your data to anyone.
Who is responsible
L’ATELIER D’OLIVIER, a simplified joint-stock company with a sole shareholder, share capital €10,000, 1 rue de Milly, 77930 Perthes, France, Melun trade register 849 071 832.
For any question, or to exercise your rights: contact@atelierdolivier.com or +33 7 66 51 28 82.
What we collect, and why
| Data | Why | On what basis |
|---|---|---|
| Your name, email and telephone number | To process the order, confirm it, and reach you if delivery runs into trouble | Performance of the contract |
| The recipient’s name, address and telephone number | To deliver, and to call if nobody answers | Performance of the contract |
| The message accompanying the bouquet, the ribbon text | To write it on the card | Performance of the contract |
| For a funeral piece: the time and place of the ceremony | To deliver before the ceremony | Performance of the contract |
| Your order history | Follow-up, complaints, accounting obligations | Legal obligation |
| Website audience measurement | To know which pages are of use | Your consent |
We never ask for sensitive data. The time and place of a ceremony are used for delivery alone and are kept only for as long as that delivery, and any resulting complaint, requires.
Who else sees it
Your data is passed on only to those who take part in performing the order, and for that need alone:
- Our partner florists, when an order is made by a partner workshop. They receive what is necessary for the arrangement and the delivery, nothing else.
- Carriers, including Chronopost for dried-flower dispatches: the recipient’s name, address and telephone number.
- Ecwid (Lightspeed), which hosts the shop and the basket.
- Payment providers — bank card and PayPal. We never see your card number: it does not pass through us.
- LWS, which hosts the site on servers located in France.
- Google (Analytics and Ads) and Meta (Facebook), for audience measurement and advertising, only if you have consented.
- Axeptio, which collects and stores your cookie choice.
We do not sell, rent or exchange your data.
Transfers outside Europe
Google’s and Meta’s measurement and advertising tools may transfer data to the United States. Those transfers rely on the EU–US Data Privacy Framework and on the European Commission’s standard contractual clauses.
These tools are triggered only with your consent. If you refuse in the banner, no data leaves on that basis.
How long we keep it
| Data | Period | Why that period |
|---|---|---|
| Orders and invoices | 10 years | Accounting obligation (article L123-22 of the French Commercial Code) |
| Customer details with no further order | 3 years | From the last contact, in line with the CNIL’s recommendation |
| Messages and delivery instructions | 1 year | Long enough to handle a complaint |
| Cookie choice | 6 months | After which you are asked again |
| Audience measurement | 13 months for the trackers, 25 months for the data | Ceilings recommended by the CNIL |
Your rights
You may at any time ask us:
- to access the data we hold about you;
- to correct it if it is inaccurate;
- to erase it, except what the law requires us to keep;
- to restrict its processing;
- to receive it in a readable format, or to have it sent to another business;
- to object to a processing operation, in particular to marketing;
- to withdraw your consent at any time, without affecting what was done before.
An email to contact@atelierdolivier.com is enough. We reply within one month. We may ask you to prove your identity, only where there is a genuine doubt.
If our reply does not satisfy you, you may refer the matter to the French data protection authority: cnil.fr — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France. If you live in another EU country, you may also refer it to your own national authority.
Cookies
A cookie is a small file the site places on your device. We use three kinds:
- Those that make the site work — keeping your basket, remembering your language, securing payment. They require no consent, because without them the site does not work.
- Those that measure the audience — knowing which pages are read. Subject to your consent.
- Advertising ones — Google Ads and Meta, to know which adverts lead to orders. Subject to your consent.
The banner shown on your first visit lets you accept or refuse category by category. Refusing is as simple as accepting, and does not prevent you from ordering. You can change your mind at any time from the same tool.
Security
The site is served over HTTPS: the data exchanged is encrypted between your browser and our servers. Payment is handled by approved providers, and we keep no banking data.
Minors
The site is not aimed at people under fifteen and we do not knowingly collect their data. If you find that a minor has sent us any, tell us: we will erase it.
Privacy policy in force as of 30 August 2026. It replaces the previous version. Any change will be published on this page.